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CLAIMS 

1. A method of securing data stored on an electronic device, the method 
comprising encrypting the data using a cryptographic key derivable from or accessed 
5 using a passphrase, requiring the entry into the device of the passphrase when a user 
wishes to access the data, subsequently inhibiting access to the data whilst the device 
remains active, and requiring the entry into the device of a predefined password when a 
user wishes to access the data, the password being different from the passphrase. 

10 2. A method according to claim 1, wherein, following inhibition of data access, the 
device requires that the user enter the correct password within a predefined number of 
attempts, and, if the user fails to enter the correct password within this number of 
attempts, the cryptographic key stored by the device is deleted, and the user requested to 
reenter the correct passphrase. 

15 

3. A method according to claim 2, wherein, if the correct passphrase is not 
reentered by the user, the encrypted data may only be accessed by entering the 
cryptographic key into the device. 

20 4. A method according to claim 1 and comprising storing the predefined password 
in a memory of the device following encryption with said password or said 
cryptographic key, and verifying the password entered by the user by comparing it with 
the stored password, 

25 5. A method of preventing unauthorised access to electronic data stored on a 
computer device, the method comprising: 

requesting a user to input a passphrase into the device; 

receiving an entered passphrase and using the passphrase to generate or access a 
cryptographic key; 

30 storing the cryptographic key in a memory of the device, wherein the stored key 

can be used to subsequently encrypt and decrypt data on the device; 
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subsequently inhibiting a user from accessing data on the device after a 
predefined period, or after a predefined period of non-use, or after some predefined 
action by the user; 

requesting a user to input a password into the device; 
5 receiving the password and, only if the password corresponds to a predefined 

password which is different from said passphrase, allowing the user to access data on 
the device, otherwise continuing to inhibit a user from accessing data on the device. 

6. Apparatus for securing electronic data, the apparatus comprising: 
10 a memory for storing encrypted and unencrypted data: 

first processing means for encrypting data using a cryptographic key derivable 
from or accessed using a passphrase; 

input means for receiving the passphrase from a user when the user wishes to 
access the data; 

1 5 second processing means for subsequently inhibiting access to the data whilst 

the device remains active, and for requiring the entry into the device of a predefined 
password via said input means when a user wishes to access the data, the password 
being different from the passphrase. 

20 7. Apparatus according to claim 6, the apparatus being a mobile computer device 
such as a laptop or palmtop computer, a PDA, or a mobile telephone. 

8. A computer storage medium having stored thereon a program for causing a 
computer device to secure data stored on the electronic device by: 
25 encrypting the data using a cryptographic key derivable from or accessed using a 

passphrase, requiring the entry into the device of the passphrase when a user wishes to 
access the data, subsequently inhibiting access to the data whilst the device remains 
active, and requiring the entry into the device of a predefined password when a user 
wishes to access the data, the password being different from the password. 

30 



